
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json)
Hash identifier: H2ik+/v6QB8qhHjp67kgwEnZMt1i/3g0HtyQopjMnHE=
Subject key identifier: 92:3B:D7:6F:1D:FE:F7:3D:AA:39:10:3C:94:BF:CE:9A:56:1F:23:93
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial: 2839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
Manifest number: 27D8
Signing time: Sat 04 Apr 2026 15:35:26 +0000
Manifest this update: Sat 04 Apr 2026 15:35:25 +0000
Manifest next update: Sat 11 Apr 2026 15:35:25 +0000
Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: vJtlhDarbLBYTk4/qKjg62pdmca5B5t5rbeF2NUMo2U=)
2: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: CwxMtEC9C2VpkRtrAxOmkLDgNIDnCe2kUJg3AFTCZ+Q=)
3: AE887848662211E7BC7E2636C4F9AE02.roa (hash: yguaeDRY2LrplRRxYoB5c17oEpxtDyf7LCchlUNWLhg=)
4: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: qPNE4ik7PHwaeTLCAW9M3KmHWwisOjArimwmq3855Xw=)
5: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: Gyt9cN9nsxb60dLcwbjKsF6bTMWMBoLo3xgo2Mxq9V8=)
6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: By2ivlv9G6j7gNcnZ7Lh9xVsvvb5/4x5aHsbmwAn23k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10297 (0x2839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Validity
Not Before: Apr 4 15:35:25 2026 GMT
Not After : Apr 11 15:35:25 2026 GMT
Subject: CN=69d12fbe-d961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:88:c1:b3:d0:63:ab:aa:18:40:5f:65:9f:
5f:14:ba:49:d1:1d:4b:28:5c:c9:2c:10:82:c1:a2:
5d:d7:be:02:d0:12:6f:fd:42:e8:d9:0f:6b:03:92:
a6:f2:64:f7:55:0b:f7:17:2c:ae:df:65:03:44:7a:
35:a6:a4:a9:2c:c1:ef:1e:38:93:76:26:54:60:aa:
46:1f:2f:a0:5c:69:9d:1e:2a:41:b7:e2:e8:a0:55:
b1:ba:35:43:6b:51:99:a6:d7:f8:78:a3:ee:3f:b1:
d1:c7:97:98:2a:17:3a:a4:6e:5f:f2:b6:2c:27:de:
1f:a6:bf:eb:b3:75:f9:6e:27:e0:7e:ef:45:67:24:
36:1e:c7:e0:e5:28:7f:f0:ec:b1:29:4c:fa:78:62:
27:b0:97:53:a2:a9:8c:a8:3a:3f:ae:61:05:cf:88:
f8:8c:99:51:90:d0:fa:64:5b:0d:b1:dd:0f:1b:74:
2d:af:ba:62:a0:78:60:9f:0d:89:f4:d1:dd:69:b6:
25:ab:94:f0:56:6a:9c:ab:b9:f3:b0:a7:63:eb:f2:
df:ec:2d:02:9c:79:2b:ef:fa:a7:51:91:81:4c:92:
05:70:c6:42:ea:35:03:64:e6:dd:f4:c2:9d:3c:09:
ff:b4:e5:00:ea:7e:9b:58:16:47:19:01:29:cc:cc:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:D7:6F:1D:FE:F7:3D:AA:39:10:3C:94:BF:CE:9A:56:1F:23:93
X509v3 Authority Key Identifier:
keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d9:9c:2f:69:f2:74:80:0b:73:c2:ce:6b:f8:29:4a:ed:02:
56:aa:87:29:05:37:98:75:f6:77:39:48:9d:6a:bf:84:4e:37:
48:5e:bb:12:88:85:b5:05:6f:4f:18:e6:22:3c:4c:eb:71:cf:
6e:13:3a:7c:9a:4f:a9:9e:8b:61:ec:4e:4e:47:ad:08:bc:4b:
40:7a:61:62:73:bb:25:82:a4:14:31:74:79:c6:f7:48:61:d9:
2f:8b:ed:60:f9:ba:d5:b0:1a:3b:22:1c:75:b8:54:45:af:ba:
c8:1d:a4:64:99:b8:69:7a:33:e8:28:29:49:ef:79:33:7a:a5:
4f:07:2e:e9:8f:85:0a:b8:76:73:ba:34:51:fd:e2:a2:1d:a3:
0a:3e:34:63:00:cb:44:14:29:0a:5f:98:99:14:b4:94:28:22:
32:ff:8d:2d:41:5e:c2:94:d7:8c:b0:14:9d:dc:15:23:9e:9b:
6b:11:45:ce:6b:13:0a:a6:93:ab:dd:d9:0e:40:38:d9:d6:9b:
1b:cb:3d:af:77:79:9f:67:6d:5d:09:81:f8:2f:87:6a:1e:01:
cd:83:fa:d2:58:7e:1e:0b:09:54:31:9a:03:81:9a:b6:59:7d:
21:9a:71:6c:90:a4:0e:23:21:8d:64:6f:b4:c4:0e:92:53:3e:
c6:ed:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:13:34 2026 by rpki-client